1 #include <linux/types.h> 2 #include <net/net_namespace.h> 3 #include <linux/netfilter/nf_conntrack_common.h> 4 #include <linux/netfilter/nf_conntrack_tuple_common.h> 5 #include <net/netfilter/nf_conntrack.h> 6 #include <net/netfilter/nf_conntrack_extend.h> 7 8 #include <uapi/linux/netfilter/xt_connlabel.h> 9 10 #define NF_CT_LABELS_MAX_SIZE ((XT_CONNLABEL_MAXBIT + 1) / BITS_PER_BYTE) 11 12 struct nf_conn_labels { 13 u8 words; 14 unsigned long bits[]; 15 }; 16 17 static inline struct nf_conn_labels *nf_ct_labels_find(const struct nf_conn *ct) 18 { 19 #ifdef CONFIG_NF_CONNTRACK_LABELS 20 return nf_ct_ext_find(ct, NF_CT_EXT_LABELS); 21 #else 22 return NULL; 23 #endif 24 } 25 26 static inline struct nf_conn_labels *nf_ct_labels_ext_add(struct nf_conn *ct) 27 { 28 #ifdef CONFIG_NF_CONNTRACK_LABELS 29 struct nf_conn_labels *cl_ext; 30 struct net *net = nf_ct_net(ct); 31 u8 words; 32 33 words = ACCESS_ONCE(net->ct.label_words); 34 if (words == 0) 35 return NULL; 36 37 cl_ext = nf_ct_ext_add_length(ct, NF_CT_EXT_LABELS, 38 words * sizeof(long), GFP_ATOMIC); 39 if (cl_ext != NULL) 40 cl_ext->words = words; 41 42 return cl_ext; 43 #else 44 return NULL; 45 #endif 46 } 47 48 bool nf_connlabel_match(const struct nf_conn *ct, u16 bit); 49 int nf_connlabel_set(struct nf_conn *ct, u16 bit); 50 51 int nf_connlabels_replace(struct nf_conn *ct, 52 const u32 *data, const u32 *mask, unsigned int words); 53 54 #ifdef CONFIG_NF_CONNTRACK_LABELS 55 int nf_conntrack_labels_init(void); 56 void nf_conntrack_labels_fini(void); 57 int nf_connlabels_get(struct net *net, unsigned int n_bits); 58 void nf_connlabels_put(struct net *net); 59 #else 60 static inline int nf_conntrack_labels_init(void) { return 0; } 61 static inline void nf_conntrack_labels_fini(void) {} 62 static inline int nf_connlabels_get(struct net *net, unsigned int n_bits) { return 0; } 63 static inline void nf_connlabels_put(struct net *net) {} 64 #endif 65